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Abstract. We propose a method to prepare different non-Poissonian signal pulses 
from sources of Poissonian photon number distribution using only linear optical 
elements and threshold photon detectors. This method allows a simple passive 
preparation of decoy states for quantum key distribution. We show that the resulting 
key rates are comparable to the performance of active choices of intensities of 
Poissonian signals. 
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The main benchmark to compare different quantum key distribution (QKD) 
systems is their secret key rate over a given distance |T]. For example, it is well known 
that QKD schemes with single photon sources can provide a key generation rate of 
linear behavior with the transmission efficiency of the quantum channel. Unfortunately, 
single photon sources are still beyond our present experimental capability and QKD 
implementations with phase randomized weak coherent pulses (WCP) are typically 
employed. In this context, it has been recently shown that decoy state QKD with WCP 
can basically reach the same performance as single photon sources [2], [3], H] . The essential 
idea behind decoy state QKD is quite simple. The sender (Alice) varies, independently 
and randomly, the mean photon number of each signal state she transmits to the receiver 
(Bob). This is usually performed by using a variable optical attenuator together with 
a random number generator. From the measurement results corresponding to different 
intensity settings, the legitimate users can obtain a better estimation of the behavior of 
the quantum channel, which translates into an enhancement of the achievable secret key 
rate and distance. This technique has been successfully implemented in several recent 
experiments O [6l [7], which show the practical feasibility of this method. 

While active modulation of the intensity of the pulses suffices to perform decoy 
state QKD in principle, in practice passive preparation might be desirable in some 
scenarios. For instance, in those setups operating at high transmission rates. Known 
passive methods rely on the use of a parametric down-conversion source together with 
a photon detector [8], [9], [10] . In this Letter we show that phase randomized WCP can 
also be used for the same purpose, i.e., one does not need a non-linear optics network 
preparing entangled states. Note that the crucial requirement of a passive decoy state 
setup is to have correlations between the photon number statistics of different signals; 
hence it is sufficient that these correlations are classical. Our method uses only linear 
optical elements and a threshold photon detector. For simplicity, we consider that this 
detector has perfect detection efficiency and no dark counts. But this analysis can 
also be adapted to cover the case of imperfect detectors. A similar technique can also 
be applied to heralded single-photon sources showing non-Poissonian photon number 
statistics pTj . 

The key idea is rather simple, although it is counter-intuitive. It is illustrated 
in Fig. [H When two phase randomized WCP, = e"'^^ ^^Q/i"/n!|n)(n| and 
p^^ = e"'^^ yU27n!|n)(n|, interfere at a beam splitter (BS) of transmittance t, 

the photon number statistics of the two outcome signals are classically correlated. 
To see this, let us first consider the interference of two pure coherent states with 
fixed phase relation, \^/JIle'^'^'^) and ly^e**^^), at a BS. The output signals are given 
by IV/^e^"^' + V/i2(l - t)e'^^)Ji^ t)e'^^ + ./Jpite'^^) The joint probability 
Pn,m of having n photons in mode a and m photons in mode h is the product of two 
Poissonian distributions: Pn,m = e~'"/^(f 7)"'/n! x e~"/^[i;(l — 7)]™'/m!, with v = + 
7 = [flit + /i2(l — t) + ^ cos6]/v, ^ = 2^ ii\\i2{\ — t)t and 9 = n/2 + 02 — 0i. The case 
of two phase randomized WCP can be solved by just integrating pn,m over all angles 9, 
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Figure 1. Interference of two phase randomized WCP, p^^ and p^^, at a beam splitter 
(BS) of transmittance t. a and 6 represent tlie two output modes. 
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Figure 2. (A) Conditional photon number distribution in mode a (see Fig. [T]): r'^ 

(black) and r'^ (grey) for the case /.ti = /.t2 = 1 and t = 1/2. (B) (black) versus a 
Poissonian distribution of the same mean photon number (grey). 
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By measuring one outcome signal, the conditional photon number statistics of the 
remaining signal varies depending on the result obtained. Specifically, whenever one 
ignores the result of the measurement the total probability of finding n photons in 
mode a can be expressed as 



m=0 



2lT 



(2) 



which turns out to be a non-Poissonian probability distribution. The joint probability 
for seeing n photons in mode a and no click in the threshold detector has the form 



Pn = Pnfl 



271 



(3) 



If the detector produces a click, the joint probability of finding n photons in mode a is 
given by = Pn — Pn- Fig- El (Case A) shows the conditional photon number statistics 
of the outcome signal in mode a depending on the result of the detector (click and not 
chck): = p^/(l - F) and = p^/F, with F = J2n=oP^ = e-t^i^^-^^+^^t]/^^^^ 
where Ig^z represents the modified Bessel function of the first kind [12]. This figure 
includes as well a comparison between and a Poissonian distribution of the same 
mean photon number (Case B). Both distributions, rj; and r^, are also non-Poissonian. 
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To perform decoy state QKD, we consider that Ahce and Bob treat no chck and 
chck events separately, and they distill secret key from both of them. We use the secret 
key rate formula provided by Refs. [I3l [T^ . 

R > maxiR", 0} + max{i?^ 0}, (4) 

with R" = q{-Q''f{E^)H{E'') + p\Yi[l - H{ei)] + p^qYo}, and similarly for R^. The 
parameter q is the efficiency of the protocol (g = 1/2 for the standard Bennett-Brassard 
1984 protocol [15], and g ~ 1 for its efficient version [16]), Q'^ is the overall gain of the 
signals, E'^ represents the overall quantum bit error rate (QBER), f{E'^) is the error 
correction efficiency [typically f{E'^) > 1 with Shannon limit f{E'^) = 1], Yn denotes the 
yield of a n-photon signal, i.e., the conditional probability of a detection event on Bob's 
side given that Alice transmits an n-photon state, ei is the single photon error rate, and 
H[x) = — xlog2 (x) — (1 — x) log2 (1 — x) is the binary Shannon entropy function. 

The quantities Q'^, E'^, Q'^, and E'^ are directly accessible from the experiment. They 
can be written as Q'^ = Yl'^=oPnYn and Q'^E'^ = Xl^o^'n^"^"' similarly for the case 
of a no click event. Here e„ denotes the error rate of a n-photon signal (cq = 1/2 for 
random background). To apply the secret key rate formula given by Eq. (jl]) one needs to 
estimate a lower bound on Yi, together with an upper bound on ci. For that, we follow 
the procedure proposed in Ref . [H] . This method requires that and satisfy certain 
conditions that we checked numerically. Note, however, that many other estimation 
techniques are also available, like, for instance, linear programming tools. We obtain 

Y, > Yi ^ maxIc^^^'-^^^^-^^^f",-^^^"^"^""! (5) 

where = + Q*^, and Y^ denotes an upper bound on the background rate Iq given 
by Yq = miia{{2E'^Q^) /pq, (2£'*Q*)/pq}. The error rate Ci can be upper bounded as 

_ . f E-^Q-^ - plY^eo E^Q^ - p^ep p'pE'Q' - pjE-^Q' \ .^^ 

ei S = mm< ^— ^ , — , - ^ r~g\^7r p 

[ piYI plYl [pIp\ - pIpDYI j 

with Q^E^ = Q'^E'^ + Q'^E'^, and where Y^ denotes a lower bound on Yq given by 
Yo > = max{0, {p\Q^ - p\Q')l{p\pl - PiPo)}- 

The only relevant statistics to evaluate Fj, Y[, and e\ are p\ and p^, with n = 0, 1, 2. 
These probabilities can be obtained by solving Eqs. ([SJ-Q. After a short calculation, 
we find that p^ = e""", pl = cue"", and P2 = {2uj'^ + ^^)e~'"/4, with u = Hit + /i2(l — t). 
The probabilities p\^ have the form p\ = /o,^e~'^, p\ = [ujIq^^ — ,^/i,^]e~'^, and P2 = 

For simulation purposes we consider the channel model used in Refs. [3], [17]. This 
model reproduces a normal behaviour of the quantum channel, i.e., in the absence of 
eavesdropping. It allows us to calculate the observed experimental parameters Q'^, E'^, 
Q*, and -E*. Our results, however, can also be applied to any other quantum channel, 
as they only depend on the observed gains and QBERs. In the scenario considered, 
the yields have the form y„ = 1 — (1 — lo)(l — 77)", where 77 represents the overall 
transmittance of the system [3], [IT]. This parameter can be related with a transmission 
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Figure 3, Lower bound on the secret key rate R given by Eq. Q in logarithmic 
scale for a passive decoy state setup with two intensity settings (dashed line). The 
transmittance of the BS is t = 1/2. The solid line represents a lower bound on R for 
an active asymptotic decoy state system 

qI 

distance / measured in km for the given QKD scheme as 77 = 10~io, where a represents 
the loss coefficient of the optical fiber measured in dB/km. The product y„e„ can be 
expressed as YnCn = YqCq + (F„ — Vo)erf, where is the probability that a photon 
hits the wrong detector due to the misalignment in the quantum channel and in Bob's 
detection setup [3l [1^. After substituting these definitions into the gain and QBER 
formulas we obtain = F - {I - Fo)e(^-^)^-"/o,(i-^)e, Q'^E'"^ = (eo - ed)YoF + CdQ^ 
gt = 1 _ (1 _ Fo)e-^-/o,^5 and Q'E' = (eo - ed)Yo + e^Q'. 

The resulting secret key rate is illustrated in Fig. [31 The experimental parameters 
are [18]: Yq = 1.7 x 10-^ ea = 0.033, a = 0.21 dB/km, and Bob's detection efficiency 
equal to 0.045. We assume that q = 1, f{E^) = f{E~^) = 1.22, and t = 1/2, i.e., we 
consider a simple 50 : 50 BS. With this configuration, it turns out that the optimal 
values of the intensities /ii and ^2 are almost constant with the distance. One of them 
is quite weak (around 10"^), while the other one is around 0.55. Fig. [3] includes as well 
the case of an active asymptotic decoy state QKD system [3]. The cutoff points where 
the secret key rate drops down to zero are I ~ 128 km (passive setup with two intensity 
settings) and / ^ 147 km (active asymptotic setup). One could reduce this gap further 
by using a passive scheme with more intensity settings. For instance, one may employ 
a photon number resolving detector instead of a simple threshold photon detector, or 
use more threshold detectors in combination with BS. From these results we see that 
the performance of the passive scheme is comparable to the active one, thus showing 
the practical interest of the passive setup. 

To conclude, we have analyzed a simple passive decoy state QKD system with phase 
randomized WCP. This setup represents an alternative to those active schemes based 
on the use of a variable optical attenuator. In the asymptotic limit of an infinite long 
experiment, we have shown that this passive system can provide a similar performance 
to the one achieved with an active source and infinity decoy settings. This idea can 
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also be applied to other practical scenarios with different signals and detectors like, for 
example, those based on thermal states or even strong coherent pulses in conjunction 
with a regular photo-detector. Details of this analysis will be presented somewhere else. 
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